Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Access Site to Site from SSL VPN. ISA 570 & ASA 5505

I have an Site to Site network between my ISA 570 and my ASA 5505.

On the ISA 570 side I have the network 192.168.0.0/24 and remote users that are connecting via AnyConnect are in the 192.168.190.0/24

On the ASA 5505 side I have the netowrk 192.168.200.0/24

The Site to Site is working properly i can reach the networks from both sides.

But when I am connected via AnyConnect to the ISA firewall I will also access the 192.168.200.0/24 network on the ASA side.

I have made an firewall (in the ISA 570) rule that are allowing traffic from SSLVPN to VPN, but I need to nat the traffic from the 192.168.190.0/24 to 192.168.200.0/24 otherwise the ASA are blocking the traffic. I can solve the problem in the ASA but i want to solve it in the ISA 570.

1 ACCEPTED SOLUTION

Accepted Solutions
New Member

I have solved my problem.Just

I have solved my problem.

Just added an Advanced NAT.

From: Any (this will be changed to proper network later)

To: Any (this will be changed to proper network later)

Original Source Adress: Any (this will be changed to proper network later)

Original Destination Adress: Site_B (192.168.200.0/24)

Original services: Any

Translated source adress: IP of my ISA 570 (192.168.0.1)

Translated destination adress: Site_B (192.168.200.0/24)

Translated services: Any

 

 

1 REPLY
New Member

I have solved my problem.Just

I have solved my problem.

Just added an Advanced NAT.

From: Any (this will be changed to proper network later)

To: Any (this will be changed to proper network later)

Original Source Adress: Any (this will be changed to proper network later)

Original Destination Adress: Site_B (192.168.200.0/24)

Original services: Any

Translated source adress: IP of my ISA 570 (192.168.0.1)

Translated destination adress: Site_B (192.168.200.0/24)

Translated services: Any

 

 

133
Views
0
Helpful
1
Replies
CreatePlease login to create content